Permanent Establishment Risk: How US Companies Avoid It When Hiring in India

Most US companies do not realize they have created a permanent establishment in India until a tax assessment notice arrives. By that point, the tax bill, interest, and penalties have already stacked up, sometimes into the hundreds of millions.

In February 2026, an Indian tribunal set aside a Rs 3,960 crore (approximately USD 475 million) tax demand against Booking.com that turned entirely on whether the company had a permanent establishment in India. That is not a case about a company with offices or factories in India. It is a case about whether certain activities of an India-based team created a taxable presence for the foreign parent.

For US companies hiring engineers, data scientists, and technical staff in India, permanent establishment risk India is the tax exposure that most compliance guides either describe only in legalese or leave at definitions without getting to what you actually need to do. This guide covers what triggers PE risk when hiring in India, the four types of PE Indian tax authorities assess, the specific conduct that creates or avoids the risk, how EOR structures affect PE exposure, and the six-step mitigation playbook that holds up in practice.

What Is Permanent Establishment Risk India?

Permanent establishment risk is the possibility that your company's activities in India create a taxable presence there, making your US parent liable for Indian corporate income tax on India-attributable profits, plus filing obligations and penalties.

A permanent establishment (PE) in India means a portion of your global income becomes taxable in India. The Indian corporate tax rate for foreign companies is 40% plus applicable surcharge and cess, reaching an effective rate of approximately 43.68%. Once PE is established, India can assess tax on the profits the tax authority attributes to the Indian operations, often with retrospective effect from the date the PE is deemed to have arisen.

The governing framework: PE risk for US companies in India is assessed under two overlapping sources of law. Section 9 of the Indian Income Tax Act 1961 defines deemed income accruing in India. Article 5 of the US-India Double Taxation Avoidance Agreement (DTAA), signed September 1989 and in force from December 18, 1990, defines what constitutes a PE for treaty purposes. The DTAA definition is generally more protective than Section 9, which is why US companies should always invoke DTAA protection rather than relying only on domestic law.

The Four Types of PE That Matter When Hiring in India

India recognizes four main types of PE. Three of them are directly relevant when a US company hires India-based employees.

1. Fixed Place PE

A fixed location through which the US company's business is carried on constitutes a fixed place PE. This includes offices, factories, branches, and premises used continuously.

The Hyatt Supreme Court ruling changed the fixed place analysis in 2025 to 2026. The Court held that "continuous use of someone else's premises" can constitute a fixed place PE even without ownership or a formal lease. This makes the question of coworking spaces, dedicated desks, and even home offices more significant than it was previously.

The 6-month threshold: For a fixed place to become a PE, the business must be carried on through that place for more than 6 months under the US-India DTAA. Temporary arrangements under 6 months are lower risk.

OECD 2025 update: Remote employees spending 50% or more of their working time in a foreign country now face automatic PE assessment under updated OECD Article 5 guidance, effective November 2025. This directly affects employees who work from home in India full-time for a US parent company.

2. Dependent Agent PE (DAPE)

This is the most common PE trigger for US companies hiring in India, and the one EOR structures most often address.

A Dependent Agent PE arises when a person in India habitually exercises authority to conclude contracts on behalf of the US company, or habitually maintains a stock of goods for delivery on behalf of the US company. The key word is "habitually" — occasional contract work is different from regular and repeated contract authority.

Six 2025 to 2026 Indian rulings tightened this test. The practical rule: keep contract signing authority and commercial decision-making with personnel in the US. India-based employees who execute work but do not negotiate or conclude commercial contracts on behalf of the US parent are at significantly lower DAPE risk.

High-risk roles for DAPE: Sales staff who close India contracts, business development employees who negotiate agreements, account managers with commercial signing authority.

Lower-risk roles for DAPE: Software engineers, data scientists, ML engineers, DevOps, QA, and other technical roles that execute work directed by the US parent but do not negotiate or conclude contracts on its behalf.

3. Service PE

A service PE arises when the US company furnishes services in India through its personnel, and those services continue for more than 90 days in any 12-month period under the US-India DTAA. Some bilateral treaties set this threshold as low as 30 days.

For US companies with India-based technical staff working on customer-facing deliverables, service PE analysis is relevant when the nature of the work involves delivering services to India-based end clients rather than purely internal product development.

4. Significant Economic Presence (SEP)

Section 9(1)(i) of the Indian Income Tax Act now includes Significant Economic Presence as a deemed income trigger for non-resident companies. SEP is assessed where a non-resident company has transactions in India exceeding Rs 2 crore in a financial year, or has 3 lakh or more users in India. This is primarily a concern for technology platforms and companies with India-facing products, not specifically for companies hiring India-based internal teams.

What Specifically Triggers PE Risk When Hiring in India

The practical triggers are behavioral, not just structural. Six specific conduct patterns consistently create PE exposure in Indian assessments:

1. India-based employees with contract signing authority. Any India-based employee who regularly signs contracts with customers, vendors, or partners on behalf of the US parent creates DAPE exposure. The authority to conclude contracts is the primary behavioral test.

2. Wiring salary directly from US payroll. Paying India-based employees directly from a US bank account without a compliant India payroll structure, EOR, or entity signals to Indian tax authorities that the US company is operating a business in India through those employees. This is the single most common mistake US founders make when hiring their first India employee.

3. Leasing office space in the US company's name. Any lease or coworking membership in India in the US company's name creates fixed place PE exposure. This applies to Grade A offices, coworking desks, and even if the company is reimbursing an employee's coworking membership and the employee uses it full-time.

4. Employees working from home full-time in India for the US parent. Under the OECD 2025 update, an employee working 50% or more of their time from a home office in India on behalf of a foreign company faces automatic PE assessment. This matters for fully remote engineering hires.

5. India employees managing India customer relationships or revenue. Any role that involves managing, maintaining, or expanding India-based customer accounts on behalf of the US parent creates DAPE and potentially fixed place PE exposure if done continuously.

6. Sending US employees to India for extended periods. US employees who spend more than 90 days in India in a 12-month period providing services to Indian clients on behalf of the US parent can trigger service PE.

What Does Not Trigger PE Risk: The Safe Activities

Not everything a US company does with India-based employees creates PE. These activities carry low PE risk when structured correctly:

Internal engineering and technical work. Software engineers, data scientists, ML engineers, and technical staff who build products for the US parent's global use, do not negotiate or conclude India contracts, and work through a compliant employment structure carry low PE risk.

Back-office and support functions. HR, finance, operations, and administrative functions that support the US parent rather than facing India customers carry low PE risk.

Employees hired through an EOR where the EOR is the legal employer. When an EOR like Kaamwork is the legal employer, the employees work under the EOR's India entity, not the US company's. The EOR's India entity may create its own tax presence, but that is the EOR's position, not the US parent's.

This is the critical distinction for US companies evaluating PE risk eor solutions: EOR employment shifts the employer-of-record position to the EOR's India entity. The US company remains the operational director of the work. But the legal employment relationship, the one that Indian tax authorities look at when assessing PE, sits with the EOR.

PE Risk EOR: Does Using an EOR Eliminate Permanent Establishment Risk?

Using an EOR significantly reduces permanent establishment risk India, but it does not automatically eliminate it. This is a nuanced point that most EOR providers do not explain clearly enough.

What EOR eliminates: Fixed place PE created by the US company having direct employment relationships in India. Service PE created by the US company directly employing personnel who deliver services. DAPE in many technical and operational roles where the India team does not have contract authority.

What EOR does not eliminate: DAPE if India-based employees (employed by the EOR on paper) habitually conclude contracts on behalf of the US parent. Fixed place PE if the US company reimburses a coworking membership in its own name or directs employees to a fixed location it controls. Conduct-based PE where the India-based team exercises commercial authority on behalf of the US parent regardless of who signs their employment contract.

The governing test is conduct, not who employs the individual on paper. As confirmed in the Asanify PE risk analysis from May 2026: "PE risk turns on conduct, mainly whether someone in India habitually concludes contracts on your behalf. Six 2025 to 2026 Indian rulings tightened the test. Keep contract authority with your home entity and the risk stays low."

The cleanest PE risk profile for US companies using EOR: technical roles (engineering, data, product) where the India team executes work and does not negotiate or conclude contracts on behalf of the US parent.

The highest PE risk profile using EOR: sales, business development, and customer success roles where India-based team members regularly close deals, manage India customer accounts, or negotiate commercial terms on behalf of the US parent, even if technically employed by the EOR.

The US-India DTAA and Transfer Pricing: Two Additional Layers

DTAA protection: US companies are entitled to treaty protection under Article 5 of the US-India DTAA. The DTAA definition of PE is generally more protective than India's domestic law definition. US companies should explicitly invoke DTAA protection in any PE risk assessment or response to a tax notice. Companies that rely only on Section 9 of the Income Tax Act and never invoke DTAA protection are leaving their strongest defense on the table.

Transfer pricing for India EOR arrangements: Even without a PE, intercompany transactions between a US parent and its India EOR arrangement may attract transfer pricing scrutiny if the relationship is structured as an intercompany services arrangement. For companies hiring more than 10 to 15 people in India through an EOR over an extended period, it is worth having a transfer pricing analysis completed to document that the arrangement reflects arm's length pricing. Documentation must be ready before October 31 under Section 92D of the Income Tax Act.

The 6-Step Permanent Establishment Risk India Mitigation Playbook

These six steps represent the practical mitigation approach that holds up in Indian tax assessments:

Step 1: Use an EOR for all India employment. Ensure every India-based employee is legally employed by an India EOR entity, not directly by the US parent. This eliminates the direct employment relationship that creates the simplest form of PE. See how Kaamwork's EOR model works for the structure.

Step 2: Keep all contract authority in the US. Ensure no India-based team member has authority to negotiate, conclude, or sign commercial contracts on behalf of the US parent. All commercial agreements must be signed by US-based personnel. India-based employees can assist in execution but must not be the decision-making authority on commercial terms.

Step 3: Do not lease or register any space in the US company's name in India. If your India team uses coworking space, ensure memberships are under the EOR's name or the employee's personal arrangement, not the US company's. Avoid any formal lease in India in the US company's name.

Step 4: Limit the time US employees spend in India. US employees visiting India for business should stay under 90 days in any 12-month period to avoid service PE under the DTAA. Track days physically spent in India and set an internal policy with a conservative buffer, 60 days as a practical limit.

Step 5: Define clear role mandates for India-based employees. Document what each India-based employee does and what they do not do. Internal engineering, product development, and data work for global use carries low PE risk. India-facing commercial roles carry high PE risk regardless of EOR employment.

Step 6: Get a PE risk review before hiring for commercial roles in India. Technical hires carry low PE risk under a correctly structured EOR. Sales, business development, and customer success hires in India require a specific PE risk assessment before the role is activated. The cost of the assessment is trivial compared to a retrospective PE tax assessment.

For the full India employment compliance picture alongside PE risk, read the complete EOR India guide for US companies, review how India payroll compliance works, understand the EOR vs contractor comparison (contractor arrangements carry even higher PE risk than EOR structures), and see the best way to hire in India as a US startup for the full decision framework.

Permanent establishment risk India is real, it is conduct-based, and it does not announce itself until a tax assessment notice arrives. The core rule is simple: keep contract authority in the US, use an EOR for employment, do not lease space in the US company's name, and limit the time US employees spend in India to under 90 days per 12-month period.

Technical roles hired through a correctly structured EOR carry low PE risk. Sales and commercial roles in India require specific PE risk analysis before activation regardless of the employment structure.

If you want to understand what your specific India hiring structure looks like from a PE risk perspective, Kaamwork can walk you through the role-by-role analysis. Talk to Kaamwork today.

This article provides general information about permanent establishment concepts and international tax considerations. It is not tax advice or legal advice. Consult a qualified India tax counsel before making decisions based on this content.

Frequently Asked Questions

Q: What is permanent establishment risk India?
Permanent establishment risk India is the exposure that a US company's activities in India will be treated by Indian tax authorities as creating a taxable presence there, making the US parent liable for Indian corporate tax on India-attributable profits. If India determines your company has a PE, a portion of your global income becomes taxable in India at approximately 43.68% (40% plus surcharge and cess), often with retrospective effect from when the PE is deemed to have begun. PE risk is assessed under Article 5 of the US-India Double Taxation Avoidance Agreement and Section 9 of India's Income Tax Act 1961.

Q: Does using an EOR in India eliminate permanent establishment risk?
Using an EOR significantly reduces permanent establishment risk India but does not automatically eliminate it. EOR employment shifts the legal employer relationship to the EOR's India entity, removing direct employment-based PE triggers for the US company. However, PE risk from conduct remains. If India-based employees hired through the EOR habitually conclude contracts on behalf of the US parent, negotiate commercial terms, or manage India customer relationships, DAPE risk remains regardless of who employs them on paper. The governing test is what the India-based person does, not who signs their employment contract.

Q: What triggers a dependent agent permanent establishment in India? A Dependent Agent PE (DAPE) in India is triggered when a person in India habitually exercises authority to conclude contracts on behalf of the US parent, or habitually maintains a stock of goods for delivery on behalf of the US parent. Habitual contract authority is the primary behavioral trigger. Sales staff, business development employees, and account managers who regularly close deals or negotiate commercial agreements on behalf of the US company in India create DAPE risk regardless of their employment structure. Technical employees who execute work but do not negotiate commercial contracts carry significantly lower DAPE risk.

Q: Can wiring salary directly from the US create PE risk in India?
Yes. Paying India-based employees directly from a US bank account without a compliant India payroll structure signals to Indian tax authorities that the US company is conducting business operations in India through those employees. This is one of the most common PE risk triggers for US founders hiring their first India employee informally. The correct structure is to pay through an EOR or registered India entity, ensuring salary is disbursed in INR through a compliant India payroll system with TDS, EPF, and ESIC properly handled.

Q: How does the OECD 2025 update affect permanent establishment risk for India-based remote workers?
The OECD updated its Article 5 guidance in November 2025 to introduce a clear PE trigger: remote employees spending 50% or more of their working time in a foreign country now face automatic PE assessment. For India-based employees working full-time from home for a US parent, this update increases PE exposure compared to previous guidance. Using an EOR addresses this by making the EOR the legal employer. The employee's home office becomes the EOR's operational location, not a fixed place of business of the US parent.

Q: What is the safe harbor for US employees visiting India for business?
Under Article 5 of the US-India Double Taxation Avoidance Agreement, the service PE threshold is 90 days in any 12-month period. US employees who visit India for business should stay under 90 days in any 12-month period to avoid triggering service PE. In practice, set an internal policy with a buffer of 60 days to account for unexpected extensions. Track India visit days systematically, not informally. Days of arrival and departure both count toward the threshold in most treaty interpretations.